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CLAIMS 

1. A security indication spanning tree method comprising: 
determining asset value of a network node; 

5 ascertaining exposure rating of said network node; 

establishing a functional priority risk indicator for indicating the likelihood of 
an attack from another network node; and 

creating a spanning tree schematic of a network including said network node, 
wherein said spanning tree schematic includes an indication of said asset value. 

10 

2. A security indication spanning tree method of Claim 1 wherein said spanning 
tree schematic includes an indication of said exposure rating. 

3. A security indication spanning tree method of Claim 1 wherein said spanning 
15 tree schematic includes an indication of said attack risk. 

4. A security indication spanning tree method of Claim 1 wherein said asset value 
provides an indication of an economic value of functions provided by said network 
node. 
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5. A security indication spanning tree method of Claim 1 said asset value 
corresponds to an economic impact of a disruption to functionality provided by said 
network node. 
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6. A security indication spanning tree method of Claim 1 wherein said exposure 
rating defines a threshold value corresponding to connectivity of the network node 
with other network nodes. 

5 7. A security indication spanning tree method of Claim 1 wherein said network 
node is given an exposure rating value based upon a connectivity distance from a root 
node. 

8. A security indication spanning tree method of Claim 1 wherein said root node is 
10 a node closest to an external network. 

9. A security indication spanning tree method of Claim 1 wherein said functional 
priority risk indicator is associated with an economic benefit and utility of 
functionality said network node provides. 

15 

10. A security indication spanning tree system comprising: 
a bus for communicating information; 

a processor coupled to said bus, said processor for processing said information 
including instructions for building an attack impact susceptibility spanning tree 
20 representation including asset value factors; and 

a memory coupled to said bus, said memory for storing said information, 
including instructions for building said attack impact susceptibility spanning tree 
representation including said asset value factors. 

25 11. A security indication spanning tree system of claim 10 wherein said asset risk 
value is automatically determined.. 
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12. A security indication spanning tree system of claim 10 further comprising a 
central console for interfacing with a network application management platform. 

5 13. A security indication spanning tree system of claim 10 wherein said instructions 
include attack spread risk determination instructions. 

14. A security indication spanning tree system of claim 10 wherein said instructions 
include exposure rating determination directions. 

10 

15. A computer usable storage medium having computer readable program code 
embodied therein for causing a computer system to implement security indication 
spanning tree instructions comprising: 

a device examination module for examining information regarding devices 
15 included in a centralized resource network , wherein said examining includes 
ascertaining what applications said devices support; 

an importance indication module for obtaining an indication of a relative 
importance of functionality provided by said device; and 

a spanning tree module for building a spanning tree topology representation 
20 including said indication of said relative importance of said device in supporting said 
applications. 

16. A computer usable storage medium of Claim 15 herein said relative importance 
of said device is based upon an economic value of functions said devices performs in 

25 support of said applications. 
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17. A computer usable storage medium of Claim 15 further comprising an internal 
attack permeability module for investigating the permeability of a network in 
permitting an internal attack on a device from other devices included in the network. 

18. A computer usable storage medium of Claim 17 wherein said investigating 
includes: 

analyzing the ease of attack on said device from other devices in said 
centralized resource network; and 

assigning an connectivity threshold value to said device based upon said 
analysis of said ease of attack. 

19. A computer usable storage medium of Claim 15 further comprising an attack 
danger assessment module for assessing the danger of an attack from other devices 
included in said network. 

20. A computer usable storage medium of Claim 19 further comprising: 
deriving an attack danger indication based upon said indication of said relative 

importance of said device and said connectivity threshold value; and 
associating said attack danger indication with said device. 
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